Tunnel timing out after 10-20 minutes

[zefoo]

After about 10-20 minutes, the tunnel seems to go down. The page is either blank or it seems to load continuously.

2024/03/20 05:20:49.904 ERROR   http.log.error  read tcp 127.0.0.1:53674->127.0.0.1:11312: read: connection reset by peer       {"request": {"method": "GET", "uri": "/dashboard", "proto": "HTTP/2.0", "remote_addr": "1.1.102.233:52113", "host": "myproject.local.maskeddomain.com:4443", "headers": {"Accept": ["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"], "Sec-Fetch-Site": ["same-origin"], "Accept-Language": ["en-US,en;q=0.9"], "Referer": ["https://myproject.local.maskeddomain.com:4443/settings"], "Accept-Encoding": ["gzip, deflate, br"], "Cookie": ["session=bb2db931-5b1f-44ed-8127-696d8c1f1643"], "Sec-Fetch-Dest": ["document"], "Sec-Fetch-Mode": ["navigate"], "User-Agent": ["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"]}, "tls": {"resumed": false, "version": 772, "ciphersuite": 4865, "proto": "h2", "proto_mutual": true, "server_name": "myproject.local.maskeddomain.com"}}, "duration": 85.283559369, "status": 502, "err_id": "kuw2p2rrz", "err_trace": "reverseproxy.(*Handler).ServeHTTP (reverseproxy.go:411)"}
2024/03/20 05:20:49.905 ERROR   http.log.error  read tcp 127.0.0.1:47478->127.0.0.1:11312: read: connection reset by peer       {"request": {"method": "GET", "uri": "/login", "proto": "HTTP/2.0", "remote_addr": "27.22.61.65:40914", "host": "myproject.local.maskeddomain.com:4443", "headers": {"User-Agent": ["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Safari/605.1.15"], "Accept-Language": ["en-US,en;q=0.9"], "Sec-Fetch-Dest": ["document"], "Accept": ["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"], "Sec-Fetch-Site": ["none"], "Cookie": ["session=6ba88d86-cb2e-4f43-9357-e5f6be6aed17; _fbp=fb.1.1709064407779.1046349965; _ga_R5HP55YQDM=GS1.2.1709999327.1.0.1709999327.0.0.0; _ga=GA1.2.1469092225.1709064408; mf_426d9d79-5d8d-401e-b4d0-0c8f44665f53=73f7144d5e5bdad6bac3627c256491d7|02274711dd6feb3438b262389426589f0e05afd1.47.1709064407713|1709064407711||0||||0|17.99|88.15748; mf_user=f7c694a32c4d42f5c62deffe95690c4a|"], "Accept-Encoding": ["gzip, deflate, br"], "Sec-Fetch-Mode": ["navigate"]}, "tls": {"resumed": false, "version": 772, "ciphersuite": 4865, "proto": "h2", "proto_mutual": true, "server_name": "myproject.local.maskeddomain.com"}}, "duration": 35.339349525, "status": 502, "err_id": "7zntsri48", "err_trace": "reverseproxy.(*Handler).ServeHTTP (reverseproxy.go:411)"}
2024/03/20 05:20:51.345 ERROR   http.log.error  dial tcp :11312: connect: connection refused    {"request": {"method": "POST", "uri": "/private/properties/latest.json", "proto": "HTTP/2.0", "remote_addr": “4.15.7.24:34409", "host": "myproject.local.maskeddomain.com:4443", "headers": {"Cookie": ["session=b8b1cd43-85fa-4b47-ad72-0a571c69a802"], "Sec-Ch-Ua-Platform": ["\"Linux\""], "Referer": ["https://myproject.local.maskeddomain.com:4443/properties-map"], "Accept-Language": ["en-US,en;q=0.9"], "Content-Length": ["48"], "Sec-Ch-Ua-Mobile": ["?0"], "Sec-Fetch-Dest": ["empty"], "Accept-Encoding": ["gzip, deflate, br, zstd"], "User-Agent": ["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"], "Content-Type": ["application/json"], "Sec-Fetch-Site": ["same-origin"], "Sec-Fetch-Mode": ["cors"], "Sec-Ch-Ua": ["\"Not A(Brand\";v=\"99\", \"Google Chrome\";v=\"121\", \"Chromium\";v=\"121\""], "Accept": ["*/*"], "Origin": ["https://myproject.local.maskeddomain.com:4443"]}, "tls": {"resumed": false, "version": 772, "ciphersuite": 4865, "proto": "h2", "proto_mutual": true, "server_name": "myproject.local.maskeddomain.com"}}, "duration": 0.000426509, "status": 502, "err_id": "t2hnfwi50", "err_trace": "reverseproxy.(*Handler).ServeHTTP (reverseproxy.go:411)"}
2024/03/20 05:20:53.223 INFO    admin.api       received request        {"method": "POST", "host": "127.0.0.1:2019", "uri": "/config/apps/http/servers/sirtunnel/routes", "remote_addr": "127.0.0.1:36504", "headers": {"Accept-Encoding":["identity"],"Connection":["close"],"Content-Length":["173"],"Content-Type":["application/json"],"User-Agent":["Python-urllib/3.6"]}}
2024/03/20 05:20:53.225 INFO    admin   admin endpoint started  {"address": "tcp/localhost:2019", "enforce_origin": false, "origins": ["localhost:2019", "[::1]:2019", "127.0.0.1:2019"]}
2024/03/20 05:20:53.226 INFO    http    server is listening only on the HTTPS port but has no TLS connection policies; adding one to enable TLS {"server_name": "sirtunnel", "https_port": 4443}
2024/03/20 05:20:53.228 INFO    http    enabling automatic HTTP->HTTPS redirects        {"server_name": "sirtunnel"}
2024/03/20 05:20:53.229 INFO    http    enabling automatic TLS certificate management   {"domains": ["myproject.local.maskeddomain.com", "myproject-admin.local.maskeddomain.com", "tino-ssh.local.maskeddomain.com"]}
2024/03/20 05:20:53 [INFO][cache:0xc0007680c0] Started certificate maintenance routine
2024/03/20 05:20:53 [INFO][tino-ssh.local.maskeddomain.com] Obtain certificate; acquiring lock...
2024/03/20 05:20:53 [INFO][tino-ssh.local.maskeddomain.com] Obtain: Lock acquired; proceeding...
2024/03/20 05:20:53 [INFO][cache:0xc00095f680] Stopped certificate maintenance routine
2024/03/20 05:20:53.263 INFO    autosaved config        {"file": "/home/tunnel/.config/caddy/autosave.json"}
2024/03/20 05:20:53 [INFO][tino-ssh.local.maskeddomain.com] Waiting on rate limiter...
2024/03/20 05:20:53 [INFO][tino-ssh.local.maskeddomain.com] Done waiting
2024/03/20 05:20:53 [INFO] [tino-ssh.local.maskeddomain.com] acme: Obtaining bundled SAN certificate given a CSR

That's the error I get. Can someone explain this? Thank you.

[anderspitman]

Hey @zefoo, I would guess this is normal SSH session timeouts. I'd look into standard options for increasing the timeout, or maybe something like SSH.

If you want a more user-friendly tunnel tool, check out my list: https://github.com/anderspitman/awesome-tunneling